Question 1Identity and access provisioning lifecycle
An analyst moving from treasury to the planning team must spend two weeks training her replacement in treasury. What is the BEST way to handle her treasury access?
CISSP experience requirements
To be certified you need at least five years of cumulative, full-time experience in two or more of the eight domains. You can sit the exam before you have it and become an Associate of ISC2.
| Experience | Five years in two or more domains |
|---|---|
| Waiver | Up to one year |
| Without the experience | Associate of ISC2, six years to earn it |
| After passing | Endorsement by an ISC2 certified professional |
What counts
- Full-time work: 35 hours a week for four weeks earns one month of experience.
- Part-time work of 20 to 34 hours a week: 1,040 hours count as six months and 2,080 hours as twelve.
- Paid or unpaid internships, with a letter on the organization's letterhead.
- A bachelor's or master's degree in computer science, information technology or a related field, or a credential from ISC2's approved list such as Security+, may count for up to one year.
The Associate route
A candidate who passes without the experience may become an Associate of ISC2, then has six years to earn the five years required.
After you pass
Your application must be endorsed by an ISC2 certified professional in good standing, or by ISC2 itself if you do not know one. Once approved, you pay the first Annual Maintenance Fee and earn continuing professional education credits to keep the certification.
Try 3 questions
Question 2Security control testing
During an authorized penetration test, the testers retrieved a file containing real customer records to prove access. The engagement is ending. How should the records be handled?
Question 3Security impact of acquired software
A marketing firm is signing with a SaaS analytics provider that will hold its customer lists. Which contract term BEST protects the firm's data if the relationship ends?
Next step
Questions people ask
Can I take the CISSP without five years of experience?
Yes. If you pass without it, you can become an Associate of ISC2 and have six years to earn the five years required.
Does a degree count toward the experience?
A bachelor's or master's degree in computer science, information technology or a related field may satisfy up to one year. So may an additional credential from ISC2's approved list.
Does part-time work count?
Yes, at 20 to 34 hours a week: 1,040 part-time hours equal six months of full-time experience and 2,080 equal twelve.